
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier: gYIdvnFOoob4Zo+mbkDWmzX3B4KzZMLU7ikdff9pYbo=
Subject key identifier: 8E:CD:03:54:A1:6E:2F:B5:3B:C5:98:B3:C4:0F:84:61:DE:0E:9C:B6
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 0BB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number: 0B8C
Signing time: Wed 22 Jul 2026 19:29:45 +0000
Manifest this update: Wed 22 Jul 2026 19:29:44 +0000
Manifest next update: Wed 29 Jul 2026 19:29:44 +0000
Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: NoUd0fVX1vvP9el/9OVVfyrPrihxeoSpiH6IYqL8ckM=)
2: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
3: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2993 (0xbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Jul 22 19:29:44 2026 GMT
Not After : Jul 29 19:29:44 2026 GMT
Subject: CN=6a611a28-c80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:9b:05:cb:3f:98:05:aa:08:b1:d3:a2:ab:
26:ac:6f:22:29:41:45:40:c3:39:b0:e3:07:3a:bb:
22:d7:a8:a0:d2:25:56:12:96:4f:20:1b:f3:bf:cc:
3e:d7:c7:de:37:58:26:fb:08:56:03:dc:31:ca:3c:
05:d0:b8:20:74:b9:25:e3:5a:67:79:a7:56:ee:28:
ee:7c:b1:1e:31:bc:ce:22:ab:11:2d:b5:1a:9f:72:
f3:1e:b8:73:bd:70:c2:e4:97:b9:0c:a7:20:18:45:
94:8a:95:5d:27:b0:24:00:14:ca:9e:4f:50:d7:4c:
df:7a:5c:85:65:42:21:ea:89:52:4c:7b:5a:17:2a:
3a:0b:0f:57:6c:ca:e2:c1:ea:11:74:02:0c:03:de:
da:96:e2:b6:bf:ab:66:d1:35:95:e6:bc:3b:0b:26:
fa:5d:21:1f:55:12:46:04:52:dc:c7:15:d1:5d:7e:
10:31:b5:44:70:d3:65:f9:6e:88:6f:05:1c:9c:bb:
c5:dc:ce:32:c1:ec:7b:0f:ce:f2:65:7f:a1:b4:60:
e5:94:dc:ae:e0:ac:fa:4c:e1:50:ba:27:53:62:0a:
05:eb:66:2d:14:22:dc:79:bb:49:6d:66:48:1b:e7:
f4:85:40:e7:08:6e:c3:fc:eb:0a:7d:ca:a3:15:88:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:03:54:A1:6E:2F:B5:3B:C5:98:B3:C4:0F:84:61:DE:0E:9C:B6
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:3e:a7:b1:3a:e4:57:5c:f1:ca:53:29:7a:1c:91:0a:5a:11:
d9:42:73:e8:3e:58:18:35:68:13:d7:74:e6:c0:4f:1a:72:bd:
ec:eb:6d:2f:07:3f:73:3c:87:3f:3f:01:bd:57:f5:7f:84:2c:
d5:fb:aa:21:65:a7:aa:cc:ad:fb:d4:2e:4c:32:bd:15:a4:b6:
8b:e1:f9:a7:f3:24:39:ea:36:aa:78:1c:5b:e8:03:01:b5:03:
6f:8f:e0:0f:da:a2:b6:49:05:fe:a3:54:e1:65:7a:c1:5f:89:
35:d7:92:f4:7c:8b:25:42:4c:2c:87:70:d8:d8:3f:2a:9e:84:
4c:02:1b:58:4f:34:50:d9:38:99:0c:15:71:8a:d5:21:3c:90:
34:a9:29:c1:fb:c6:d5:4c:aa:c5:36:8b:80:f7:b8:cd:2d:62:
5b:7f:ec:53:d0:f7:13:09:fb:3a:4f:31:90:89:d4:79:72:f9:
e5:c0:98:bf:5f:d1:94:fe:d7:63:18:7c:95:a2:35:cb:c6:ae:
5b:1d:61:ec:18:30:d8:26:08:5f:e3:27:5f:08:30:a1:77:e7:
92:16:d2:ee:68:fc:62:80:90:8b:c3:4f:8a:b6:00:e0:60:83:
8b:5b:c2:01:7e:a4:d8:fe:33:8b:c9:5b:1f:92:0c:4d:e2:8c:
f9:d5:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:18 2026 by rpki-client